Privacy policy

This policy explains how White Raven IT Consultant Ltd ("we", "us") handles personal data collected through this website. It does not cover data processed under a client services agreement, which is governed by that agreement and its data processing addendum.

It applies to visitors to this website only.

This website has no backend and no database. It does not run analytics, advertising or third-party tracking scripts, and it sets no cookies.

The forms on this site do not transmit anything. Selecting “send” composes a message in your own email client, which you then choose to send or discard. Until you send it, the information stays on your device.

If you email us — whether through a form-composed draft or directly — we receive whatever you include: typically your name, email address, employer, phone number and the content of your message.

We use this to respond to your enquiry and, where relevant, to prepare a proposal. We do not add enquirers to marketing lists without a separate, explicit opt-in.

For enquiries and proposals we rely on legitimate interests (responding to a request you initiated) or on steps taken at your request prior to entering a contract.

For the Field Notes mailing list we rely on consent, which you may withdraw at any time using the unsubscribe link in any email or by writing to us.

For recruitment applications we rely on steps taken at your request prior to entering a contract, and on legitimate interests in assessing suitability.

Enquiry correspondence is retained for 24 months from the last contact, after which it is deleted unless it forms part of a live contractual record.

Recruitment applications are retained for 12 months from the decision date so we can contact you about comparable roles, unless you ask us to delete them sooner.

Mailing list records are retained until you unsubscribe.

We do not sell personal data and we do not share enquiry data with third parties for their own purposes.

We use established business email and CRM providers as processors under contract. Where those providers process data outside the UK or EEA, transfers are covered by adequacy regulations or standard contractual clauses.

Under UK GDPR you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests.

To exercise any of these, email hello@whiteraven.it. We respond within one month. If you are not satisfied with our response you may complain to the Information Commissioner's Office at ico.org.uk.

We operate an ISO 27001-certified information security management system and hold Cyber Essentials Plus. Access to enquiry correspondence is limited to staff who need it to respond.

Data protection enquiries: hello@whiteraven.it.

White Raven IT Consultant Ltd, Nexus House, 6 Darnley Road, London E9 6QH, United Kingdom.